Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/S6ZSzudp19W-xk_dn3vzzEqGzsg.roa
File: S6ZSzudp19W-xk_dn3vzzEqGzsg.roa (raw, json)
Hash identifier: l5Hcr4mOjtFWPVYhQUs6litnlnFteQvx2vu6mpzXABQ=
Subject key identifier: 4B:A6:52:CE:E7:69:D7:D5:BE:C6:4F:DD:9F:7B:F3:CC:4A:86:CE:C8
Certificate issuer: /CN=f62eeb879085c94194297dd9e4cd249cd2516515
Certificate serial: 17810234
Authority key identifier: F6:2E:EB:87:90:85:C9:41:94:29:7D:D9:E4:CD:24:9C:D2:51:65:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9i7rh5CFyUGUKX3Z5M0knNJRZRU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/S6ZSzudp19W-xk_dn3vzzEqGzsg.roa
Signing time: Wed 02 Mar 2022 14:27:09 +0000
ROA not before: Wed 02 Mar 2022 14:27:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 197540
IP address blocks: 45.157.176.0/22 maxlen: 22
37.120.160.0/19 maxlen: 32
185.16.60.0/22 maxlen: 32
37.221.192.0/21 maxlen: 32
85.235.64.0/22 maxlen: 22
185.228.136.0/22 maxlen: 32
92.60.36.0/22 maxlen: 22
194.59.204.0/22 maxlen: 22
45.83.104.0/22 maxlen: 22
185.194.140.0/22 maxlen: 22
81.16.16.0/22 maxlen: 22
5.181.48.0/22 maxlen: 22
194.13.80.0/22 maxlen: 22
46.38.240.0/21 maxlen: 32
46.38.248.0/22 maxlen: 32
185.207.104.0/22 maxlen: 32
46.38.252.0/22 maxlen: 32
185.170.112.0/22 maxlen: 32
91.204.44.0/22 maxlen: 22
93.177.64.0/22 maxlen: 22
45.129.180.0/22 maxlen: 22
185.183.156.0/22 maxlen: 32
185.163.116.0/22 maxlen: 22
152.89.104.0/22 maxlen: 22
46.38.224.0/20 maxlen: 32
213.109.160.0/22 maxlen: 22
45.90.4.0/22 maxlen: 22
2.56.96.0/22 maxlen: 22
45.9.60.0/22 maxlen: 22
185.244.192.0/22 maxlen: 32
194.55.12.0/22 maxlen: 22
91.132.144.0/22 maxlen: 22
45.142.176.0/22 maxlen: 22
89.58.28.0/22 maxlen: 22
89.58.36.0/22 maxlen: 22
89.58.32.0/22 maxlen: 22
89.58.44.0/22 maxlen: 22
89.58.40.0/22 maxlen: 22
185.233.104.0/22 maxlen: 32
5.45.96.0/20 maxlen: 32
45.132.244.0/22 maxlen: 22
185.162.248.0/22 maxlen: 32
45.136.28.0/22 maxlen: 22
5.252.224.0/22 maxlen: 22
192.145.44.0/22 maxlen: 22
85.209.48.0/22 maxlen: 22
195.128.100.0/22 maxlen: 22
193.30.120.0/22 maxlen: 22
89.58.4.0/22 maxlen: 22
89.58.0.0/22 maxlen: 22
193.31.24.0/22 maxlen: 22
89.58.8.0/22 maxlen: 22
188.68.32.0/19 maxlen: 32
89.58.16.0/21 maxlen: 21
89.58.12.0/22 maxlen: 22
89.58.24.0/22 maxlen: 22
185.243.8.0/22 maxlen: 32
46.232.248.0/22 maxlen: 22
2a0a:4cc0::/40 maxlen: 40
2a03:4001::/32 maxlen: 48
2a03:4000::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 394330676 (0x17810234)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f62eeb879085c94194297dd9e4cd249cd2516515
Validity
Not Before: Mar 2 14:27:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4ba652cee769d7d5bec64fdd9f7bf3cc4a86cec8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:6f:fc:61:55:4e:19:c7:6c:25:23:5d:53:c0:
2a:c6:bb:77:cd:b9:81:27:ac:b9:b7:3e:9c:1c:36:
c6:5e:c7:89:fc:57:ab:61:4f:3d:ce:7d:a7:d6:ff:
53:08:0d:20:db:bd:37:f9:5a:8c:52:d0:95:b0:b7:
c0:f5:ed:d8:e7:0b:5f:eb:ef:7f:07:da:fe:aa:26:
b5:80:ff:b3:47:73:97:c7:ff:27:b6:1a:e0:3a:ce:
48:ae:e0:36:54:5e:0b:5d:a3:b6:e5:06:44:19:96:
d8:e2:42:25:14:ca:52:50:ed:a5:72:d0:75:76:4e:
2b:ab:12:21:37:50:05:ce:65:34:ce:b0:0e:c0:71:
44:cc:d6:fe:73:79:8e:09:be:63:40:99:4f:be:56:
dd:f6:05:67:4e:49:81:e7:d5:1e:dc:ab:28:ff:90:
bf:6e:bd:03:ae:66:06:49:4b:b5:ac:b2:98:08:1b:
87:3d:b0:0f:fd:f4:93:15:e5:f7:04:63:ee:5c:80:
5f:ad:ff:f8:83:99:81:84:35:d4:58:01:0f:8a:bc:
d2:0b:ef:16:3a:08:83:2f:e2:3a:71:f2:56:e0:c2:
e9:e3:17:17:8c:a3:03:68:35:9b:5d:a6:ec:73:28:
db:d6:f6:8c:bd:f0:14:0f:85:7a:98:f7:f1:fe:8c:
91:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:A6:52:CE:E7:69:D7:D5:BE:C6:4F:DD:9F:7B:F3:CC:4A:86:CE:C8
X509v3 Authority Key Identifier:
keyid:F6:2E:EB:87:90:85:C9:41:94:29:7D:D9:E4:CD:24:9C:D2:51:65:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9i7rh5CFyUGUKX3Z5M0knNJRZRU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/S6ZSzudp19W-xk_dn3vzzEqGzsg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.96.0/22
5.45.96.0/20
5.181.48.0/22
5.252.224.0/22
37.120.160.0/19
37.221.192.0/21
45.9.60.0/22
45.83.104.0/22
45.90.4.0/22
45.129.180.0/22
45.132.244.0/22
45.136.28.0/22
45.142.176.0/22
45.157.176.0/22
46.38.224.0/19
46.232.248.0/22
81.16.16.0/22
85.209.48.0/22
85.235.64.0/22
89.58.0.0-89.58.47.255
91.132.144.0/22
91.204.44.0/22
92.60.36.0/22
93.177.64.0/22
152.89.104.0/22
185.16.60.0/22
185.162.248.0/22
185.163.116.0/22
185.170.112.0/22
185.183.156.0/22
185.194.140.0/22
185.207.104.0/22
185.228.136.0/22
185.233.104.0/22
185.243.8.0/22
185.244.192.0/22
188.68.32.0/19
192.145.44.0/22
193.30.120.0/22
193.31.24.0/22
194.13.80.0/22
194.55.12.0/22
194.59.204.0/22
195.128.100.0/22
213.109.160.0/22
IPv6:
2a03:4000::/31
2a0a:4cc0::/40
Signature Algorithm: sha256WithRSAEncryption
38:90:18:52:c7:cf:ae:43:00:4b:09:6a:df:e2:1c:82:a7:c1:
18:c5:b5:68:d3:03:3b:3f:2b:ff:98:39:e6:0a:59:82:e1:76:
74:9a:d0:08:cd:bf:8b:5d:30:f2:79:7d:0e:bb:ef:29:82:0e:
b6:97:64:ff:42:18:f4:7a:d3:17:0b:b1:9b:3a:32:b2:73:32:
77:2d:d4:61:47:0e:8a:0a:ea:54:13:5a:0d:a9:2d:01:ac:7a:
3b:3f:23:f5:c5:39:e0:1a:e6:ff:7b:06:bf:51:5b:67:fb:0d:
86:0b:d3:61:d1:ab:92:f9:2b:f0:62:52:7a:60:00:f3:70:14:
ea:c8:cd:5b:b8:0b:9b:a6:57:d6:e1:8e:a9:c8:3c:54:23:8e:
65:0a:2e:0e:26:d4:ab:d5:a4:ee:b7:f0:66:de:0b:b4:8a:6f:
60:e4:a6:2a:73:9e:2d:6c:86:c8:18:50:63:65:41:e3:5f:4f:
87:b6:2d:cf:eb:46:04:b9:a5:4d:6b:fd:4d:cb:a4:7d:46:f7:
36:2b:3d:be:33:2b:a2:af:24:21:b9:b9:37:cd:5a:1d:aa:c9:
d6:be:4f:6c:c1:d3:91:4d:0b:a7:65:71:e1:e7:94:f5:d7:d8:
c7:16:c5:99:99:da:d7:25:2e:bb:e6:0f:b8:8d:c5:d4:f7:67:
cf:7c:98:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:36 2023 by rpki-client on console-ams.rpki-client.org